April 2025
267 posts. Browse all months
- Data breach disclosed by UrbanOne following Cactus ransomware claims | SC Media
Urban One, a U.S. media conglomerate, disclosed a data breach affecting 355 individuals. The breach, claimed by the Cactus ransomware operation, involved the …
- Commvault says recent breach didn’t impact customer backup data
Commvault, a data protection solutions provider, recently experienced a breach in its Azure environment by a nation-state threat actor. The breach, discovered …
- Hertz data breach exposed customers’ personal information, lawsuits claim
Three class action lawsuits were filed against Hertz and Cleo Communications alleging a data breach compromised customer information in a ransomware attack. …
- Somnia anesthesia firm gets $2.4M data breach wakeup call - Westfair Communications
A $2.4 million class-action settlement was approved for a data breach at Somnia Inc., a medical management company. The breach compromised the personal records …
- Ascension discloses new data breach after third-party hacking incident
Ascension, a major US healthcare system, notified patients of a data breach involving personal and health information stolen from a former business partner in …
- VMware security advisory (AV25-242) - Canadian Centre for Cyber Security
VMware released security advisories on April 28, 2025, addressing vulnerabilities in Tanzu GemFire Vector Database and Tanzu Greenplum. Users are advised to …
- “Shadow Role” Vulnerability In AWS Services Could Lead To Full Account Takeover
A critical vulnerability in six AWS services, including Glue, SageMaker, and CodeBuild, allows attackers to gain control over cloud environments. The flaw, …
- Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations
A high court in India ordered the blocking of Proton Mail across the country following a complaint alleging the receipt of obscene and abusive emails, …
- 91% of organizations face vulnerability remediation delays | Security Magazine
A new report from Seemplicity reveals that 91% of organizations experience vulnerability remediation delays due to communication breakdowns and team …
- NT Analyzer can help determine “data broker” status under the new Bulk Data Transfer requirements | Data Protection Report
The U.S. Department of Justice’s new Bulk Data Transfer regulations, effective April 8, 2025, prohibit the transfer of bulk sensitive personal data to …
- Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code
Meta launched LlamaFirewall, an open-source framework to secure AI systems against cyber risks like prompt injection and jailbreaks. The framework includes …
- AirPlay Vulnerabilities Expose Apple Devices to Zero-Click Takeover - SecurityWeek
Vulnerabilities in Apple’s AirPlay protocol and SDK could allow attackers to remotely execute code on devices, potentially leading to complete compromise. Two …
- France Blames Russia for Cyberattacks on Dozen Entities - SecurityWeek
France’s cybersecurity agency, ANSSI, attributed cyberattacks on a dozen French entities to the Russian state-sponsored hacking group APT28. The attacks …
- RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control
RansomHub, a prominent ransomware-as-a-service (RaaS) operation, experienced a sudden shutdown of its online infrastructure on April 1, 2025. This event led to …
- Meta Releases Llama AI Open Source Protection Tools - SecurityWeek
Meta released new open source Llama AI protection tools, including Llama Guard 4, LlamaFirewall, and Llama Prompt Guard 2. These tools aim to enhance security …
- China Hackers Used Trojanized UyghurEditPP App to Target Uyghur Activists
China-linked hackers targeted Uyghur activists using a Trojanized UyghurEditPP app in a spear-phishing campaign. The attackers impersonated a trusted contact, …
- Adapting to AI: The Future of Security and Workforce
Niloofar Razi, operating partner at Capitol Meridian Partners, emphasizes the need for careful evaluation of AI models before adoption due to potential risks. …
- SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients
SentinelOne uncovered a Chinese espionage campaign targeting its infrastructure and clients. The campaign, attributed to the PurpleHaze threat cluster, …
- 31k Aussies have had their banking details compromised | news.com.au — Australia’s leading news site
Banking passwords belonging to 31,000 Australian customers have been stolen using malware and traded through the dark web. The compromised data includes …
- How to Use Generative AI to Optimize Your CV for Cybersecurity, Privacy, and IT Jobs
TL;DR: A CV has only seconds to make an impression, and many are filtered out by Applicant Tracking Systems (ATS) before a human review. Generative AI tools …
- Employee Benefits Firm Says 4 Million Affected by 2024 Hack
Verisource Services, an employee benefits administrator, reported a February 2024 hacking incident affecting 4 million individuals, a significant increase from …
- Threat Actors Hacking SAP Critical Flaw - GovInfoSecurity
Threat actors are exploiting a zero-day flaw in SAP Visual Composer, a web-based software development tool. The vulnerability, CVE-2025-31324, allows …
- Researchers Secretly Ran a Massive, Unauthorized AI Persuasion Experiment on Reddit Users
Researchers from the University of Zurich secretly ran an unauthorized experiment on Reddit’s r/changemyview, using AI bots that impersonated real …
- JokerOTP Dismantled After 28,000 Phishing Attacks, 2 Arrested
A major international law enforcement operation has dismantled JokerOTP, a sophisticated phishing tool used to intercept two-factor authentication codes and …
- Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324 | Rapid7 Blog
SAP has disclosed a critical zero-day vulnerability (CVE-2025-31324) in NetWeaver Visual Composer’s Metadata Uploader component, which allows unauthenticated …
- 4 Million Affected by VeriSource Data Breach - SecurityWeek
VeriSource Services, a Houston-based provider of employee benefit administrative services, has notified four million people that their personal information was …
- FSS investigates hacking incidents at two Korean GAs amid potential data breach - CHOSUNBIZ
The Financial Supervisory Service is investigating hacking incidents at two large Korean insurance agencies. The agencies are taking measures to prevent …
- MoD investigates major security breach involving special forces IDs online | UK | News | Express.co.uk
The Ministry of Defence is investigating a security breach after the identities of at least 20 special forces soldiers were inadvertently published online. The …
- 88,848 Americans Exposed As Massive Medical Data Breach Leaks Names, Addresses, Social Security Numbers, Financial Account Details and More - The Daily Hodl
A data breach at Nationwide Recovery Service (NRS) exposed sensitive information of nearly 100,000 Americans, including names, addresses, Social Security …
- Transforming cyber strategies to shape the enterprise of the future - SDxCentral
Enterprises must transform their cyber strategies to meet the evolving threat landscape. This involves reimagining cyber programs to leverage emerging …
- An Entire Company Was Staffed With AI Agents and You’ll Never Guess What Happened
Researchers at Carnegie Mellon University staffed a fake software company with AI agents to test their capabilities. The results were chaotic, with the …
- Oregon DEQ won’t say if ransomware group took employee data in cyberattack – DataBreaches.Net
The Oregon Department of Environmental Quality is investigating a cyberattack by the Rhysida ransomware group. The group claims to have stolen and auctioned …
- Interlock Ransomware Say It Stole 20TB of DaVita Healthcare Data
The article describes a cyberattack on DaVita Healthcare by the Interlock ransomware group. The group claims to have stolen 20TB of sensitive patient data, …
- Human error causes alarming rise in cybersecurity breaches in SA
Human error is the leading cause of cybersecurity breaches in South Africa, with at least 34.5 million accounts breached in the first quarter of 2024. Experts …
- Blue Shield Leaked Millions of Patient Info to Google for Years
Blue Shield of California exposed the health data of 4.7 million members to Google for nearly three years due to a misconfigured Google Analytics setup. The …
- Hackers Claim TikTok Breach, Leak Over 900,000 Usernames and Passwords
A hacker collective, R00TK1T, claims to have breached TikTok’s user database, leaking login information for over 900,000 users and deleting accounts. TikTok is …
- ‘Data leak fatigue’ may cause decreased awareness of data breaches
Frequent data breaches may lead to “data leak fatigue,” causing people to ignore warnings. Experts advise assuming data has been compromised and taking …
- European manufacturing data breaches up 90% - report - The Manufacturer
European manufacturers experienced a 90% increase in data breaches over the past year, with espionage-motivated actors responsible for 20% of breaches. The …
- AI impact on data breach outcomes remains ‘limited’: Verizon | Cybersecurity Dive
Despite the doubling of AI-generated text in malicious emails, the rate of successful phishing breaches remains stable, according to Verizon’s Data Breach …
- Microsoft Purges Millions of Cloud Tenants After Storm-0558
Microsoft is enhancing Entra ID and MSA security as part of its Secure Future Initiative (SFI), launched after a breach by the Chinese APT Storm-0558. The …
- DeepSeek Breach Opens Floodgates to Dark Web
The DeepSeek security breach exposed sensitive user data and proprietary information, highlighting vulnerabilities in AI systems. The exposed data, including …
- All Major Gen-AI Models Vulnerable to ‘Policy Puppetry’ Prompt Injection Attack - SecurityWeek
A new attack technique, Policy Puppetry, can bypass the safety guardrails of major generative AI models. By crafting prompts as policy files, attackers can …
- A new version of Triada spreads embedded in the firmware of Android devices | Securelist
The Triada Trojan has evolved to embed a sophisticated multi-stage loader directly into Android device firmware, enabling it to infect the Zygote process and …
- New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework
Threat actors are exploiting a new vulnerability in SAP NetWeaver to upload JSP web shells, enabling unauthorized file uploads and code execution. The …
- South Korean Companies Targeted by Lazarus via Watering Hole Attacks, Zero-Days - SecurityWeek
At least six South Korean organizations across various industries were targeted in a recent campaign by the North Korean APT Lazarus, dubbed Operation …
- Phishing Kit Darcula Gets Lethal AI Upgrade
The Darcula phishing-as-a-service platform, which powers global SMS-based smishing attacks, has recently added artificial intelligence capabilities. This …
- Inside the Verizon 2025 DBIR: Five Trends That Signal a Shift in the Cyber Threat Economy - SecurityWeek
The 2025 Verizon Data Breach Investigations Report (DBIR) reveals a mature cyber threat economy, with infostealers and ransomware operating as part of a …
- Vehicles Face 45% More Attacks, 4 Times More Hackers
Security incidents in the automotive and mobility industries rose nearly 50% in Q1 2025, with ransomware attacks against OEMs and compromised electric vehicle …
- The Good, the Bad and the Ugly in Cybersecurity - Week 17
AI is helping security teams detect and respond to sophisticated intrusions in real time. Russia-linked actors are exploiting Microsoft OAuth to target …
- Hacks Targeting Cloud single Sign-On Rose in 2024
Hacks targeting cloud infrastructure rose significantly in 2024, with attackers exploiting misconfigurations and single sign-on features to deploy info …
- North Korean Hackers Use Russian IP Infrastructure
North Korean hackers, specifically those associated with the Void Dokkaebi intrusion set, are utilizing Russian IP addresses to carry out cybercrime …
- Yale New Haven Health Notifying 5.5 Million of March Hack
Yale New Haven Health System is notifying over 5.5 million patients of a March hack that compromised personal information, including Social Security numbers. …
- 55% of threat groups active in 2024 were financially motivated | Security Magazine
Mandiant’s latest report highlights a growing trend in financially motivated cyberattacks, with 55% of tracked threat groups in 2024 driven by profit—up from …
- Zoom attack tricks victims into allowing remote access to install malware and steal money | Malwarebytes
A crime group called ELUSIVE COMET targets victims through Zoom video calls, tricking them into allowing remote control of their systems to install malware and …
- FBI confirms $16.6 billion losses to cyber-crime in 2024 - Cybersecurity Insiders
The FBI’s 2024 Internet Crime Report reveals $16.6 billion in cybercrime losses, with fraud and ransomware being the primary threats. The elderly are …
- Kelly Benefits Notifying Nearly 264,000 of Data Theft Hack
A data breach at Maryland-based Kelly Benefits has significantly expanded in scope, now affecting nearly 264,000 individuals—up from the 32,000 initially …
- 159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure
In Q1 2025, 159 CVEs were exploited in the wild, with 28.3% exploited within 24 hours of disclosure. The majority of exploited vulnerabilities were found in …
- Third-party data breaches rise almost 50 percent | Prevalent
A new study from Prevalent shows a 49% increase in third-party data breaches year-over-year, with 61% of companies experiencing a breach in 2022. The report …
- California Is About To Run Out of License Plate Numbers - Slashdot
California is projected to run out of its current license plate number format by the end of 2025. The new format will consist of three numbers, three letters, …
- WhatsApp launches privacy tool to stop users taking content off the platform | The Standard
WhatsApp is introducing a new privacy tool, Advanced Chat Privacy, which will prevent users from exporting chats, auto-downloading media, or using messages for …
- Notice of Data Breach | Blue Shield of California | News Center
The article describes a data breach at Blue Shield of California, where member information was potentially shared with Google Ads. The breach involved Google …
- Files Deleted From GitHub Repos Leak Valuable Secrets - SecurityWeek
A security researcher found hundreds of leaked secrets in deleted files from public GitHub repositories. The researcher built a tool to clone repositories, …
- UK utility cyberattacks rose 586% from 2022 to 2023 | Security Magazine
Cyberattacks on UK utility companies surged by 586% from 2022 to 2023, driven by phishing and ransomware. The energy sector reported three times more …
- Australian Businesses Gear Up for Ransom Reporting Deadline
Australian organizations with annual turnover of at least AU$3 million or designated as critical infrastructure operators must report ransomware payments to …
- Senior CISA Advisers Announce Exits Amid Federal Downsizing
Several senior advisers at the Cybersecurity and Infrastructure Security Agency (CISA), including those involved in the “Secure by Design” initiative, are …
- Russian, Chinese Hackers Targeted Dutch Government
Dutch intelligence agency reported Russian and Chinese hackers targeted critical infrastructure in the Netherlands in 2024. Russian hackers aimed to sabotage …
- SK Telecom reports hacking incident involving partial leak of user USIM data - The Korea Times
SK Telecom reported a hacking incident involving the partial leakage of customer USIM data. The company detected unauthorized network access, deleted the …
- Japan warns of hundreds of millions of dollars in unauthorized trades from hacked accounts | The Record from Recorded Future News
Japan’s Financial Services Agency reported a surge in unauthorized trades totaling hundreds of millions of dollars from hacked brokerage accounts. The agency …
- Microsoft Entra ID Lockouts After MACE App Flags Legit Users
Microsoft Entra ID accounts were locked due to a bug in the MACE Credential Revocation app, which mistakenly flagged legitimate users as high-risk. The issue …
- SSL.com Scrambles to Patch Certificate Issuance Vulnerability - SecurityWeek
A domain control validation (DCV) vulnerability in SSL.com allowed a researcher to obtain a fraudulent certificate for aliyun.com. SSL.com revoked the …
- Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware
Cybersecurity experts at Trustwave’s SpiderLabs have discovered an increase in malicious online activities originating from the Russian “bulletproof” hosting …
- Reborn: Cybercrime Marketplace Cracked Appears to Be Back
The notorious online cybercrime marketplace Cracked, which was disrupted by authorities in January, appears to have restarted operations using new …
- What’s in Store for the CVE Program Post-Mitre Management?
The Common Vulnerabilities and Exposures (CVE) Program, run by Mitre, faced imminent disruption due to funding expiration. While funding has been extended for …
- Urgent warning to all 1.8b Gmail users over ‘sophisticated’ attack stealing personal information | Daily Mail Online
Google confirmed a sophisticated phishing attack targeting 1.8 billion Gmail users. The attack, which exploits a vulnerability in Google’s infrastructure, …
- Baltimore City State’s Attorney’s Office hacked; Data leaked – DataBreaches.Net
The Baltimore City State’s Attorney’s Office was hacked, resulting in the leak of 325GB of data, including sensitive information on crime victims, …
- Thousands of UK users of Vinted, Candy Crush and Tinder were hit in global hack
At least 50,000 UK users of Vinted, Candy Crush, and Tinder were likely to have been exposed to cyber criminals in a major international hack that stole …
- Canada Warns Cyber Defenders to Buttress Edge Devices
The Canadian Center for Cybersecurity warns of increasing malicious cyberactivity from China-linked hackers targeting network edge routers. The agency urges …
- Zoom Video Conferencing App down by DDoS Attack - Cybersecurity Insiders
Zoom experienced a brief global outage due to a DDoS attack claimed by the hacking group Dark Storm. The attack, which lasted approximately 30-40 minutes, was …
- Chinese Threat Group UNC5174 Caught Using New Tools In Ongoing Cyber Campaign
Chinese state-sponsored hacking group UNC5174 has launched a new cyber campaign using a variant of their SNOWLIGHT malware and the open-source VShell Remote …
- New version of MysterySnail RAT and lightweight MysteryMonoSnail backdoor | Securelist
Kaspersky GReAT detected new versions of the MysterySnail RAT, attributed to the IronHusky APT group, targeting government organizations in Mongolia and …
- Chinese APT Mustang Panda Updates, Expands Arsenal - SecurityWeek
The Chinese state-sponsored hacking group Mustang Panda recently used an updated backdoor and several new tools in an attack against an organization in …
- Back-Office Servicer Says Dual Hacks in 2024 Hit 1.6 Million
Landmark Admin, a third-party vendor for life insurance and annuity companies, experienced two data exfiltration incidents in 2024 affecting 1.6 million …
- UK Fines Law Firm 60,000 Pounds for Ransomware Data Breach
The UK Information Commissioner’s Office fined Liverpool-based law firm DDP Law 60,000 pounds for GDPR violations related to a 2022 ransomware attack. The …
- Cybersecurity Alarms Sound Over Loss of CVE Program Funding
The Common Vulnerabilities and Exposures (CVE) program, managed by Mitre, faced funding uncertainty, prompting concerns about global cybersecurity. A coalition …
- Krebs Organizational Announcement | Chris Krebs | 42 comments
Chris Krebs announced his departure from SentinelOne, expressing gratitude for the opportunity and stating he is taking on a new challenge outside the company. …
- CRA accounts hacked after 28,000 social insurance numbers stolen in data breach | Radio-Canada.ca
A data breach of the British Columbia government’s Interior Health authority exposed personal information of over 28,000 employees. The stolen data, including …
- Chinese Android phones shipped with malware-laced WhatsApp, Telegram apps
Cheap Chinese Android phones were found to be preloaded with fake WhatsApp and Telegram apps containing malware designed to steal cryptocurrency. The malware, …
- Enhanced Version of ‘BPFDoor’ Linux Backdoor Seen in the Wild - SecurityWeek
The BPFDoor Linux backdoor, attributed to Chinese state-sponsored threat actors, is using a controller to open reverse shells and control additional hosts. The …
- Microsoft Joins Google and Yahoo in Strengthening Email Sender Requirements - Cybersecurity Insiders
Microsoft, Google, and Yahoo are implementing stricter email sender requirements to enhance security and user trust. These requirements, effective May 2025 for …
- SquareX to Uncover Data Splicing Attacks at BSides San Francisco, A Major DLP Flaw that Compromises Data Security of Millions
SquareX researchers will present a new class of data exfiltration techniques, “Data Splicing Attacks,” at BSides San Francisco 2025. These attacks exploit …
- Chinese Hackers Deploy Stealthy Fileless VShell RAT
A Chinese state-backed hacking group, UNC5174, has relaunched operations after a year of silence, deploying a fileless remote access Trojan (RAT) called …
- 94% of firms say pentesting is essential, but few are doing it right - Help Net Security
The article describes the importance of penetration testing (pentesting) in cybersecurity. Despite 94% of firms recognizing the essentiality of pentesting, …
- Hertz Discloses Data Breach Linked to Cleo Hack - SecurityWeek
Hertz Corporation is notifying customers of a data breach affecting Hertz, Thrifty, and Dollar brands. The breach, linked to the Cleo hack, involved the theft …
- Hertz Discloses Data Breach Linked to Cleo Hack - SecurityWeek
Hertz Corporation is notifying customers of a data breach affecting Hertz, Thrifty, and Dollar brands. The breach, linked to the Cleo hack, involved the theft …
- Critical flaws fixed in Nagios Log Server - Help Net Security
Three critical vulnerabilities affecting Nagios Log Server have been fixed. The vulnerabilities, including a stored XSS, DoS, and information disclosure flaw, …
- China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games - SecurityWeek
China claims three alleged U.S. operatives, working for the NSA, carried out cyberattacks on Chinese infrastructure during the Asian Games. The attacks …
- 4Chan down UPDATES: Thousands of users report issues accessing controversial website | The US Sun
Thousands of users are reporting issues accessing the controversial website 4Chan. The site’s downtime is causing panic among users, with some fearing the leak …
- An Official Statement in Response to the April 9, 2025 Executive Order
SentinelOne, a cybersecurity company, supports the White House’s mission to defend against cyber threats. They will cooperate with the April 9, 2025 Executive …
- Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware
Slow Pisces, a North Korean state-sponsored threat group, targets cryptocurrency developers on LinkedIn with coding challenges containing malware. The malware, …
- Vulnerability Summary for the Week of April 7, 2025 | CISA
The CISA Vulnerability Bulletin summarizes new vulnerabilities from the past week, categorized by severity using the CVSS standard. It includes CVE …
- AI Hallucinations Create a New Software Supply Chain Threat - SecurityWeek
Researchers from three US universities warn that package hallucinations, a common issue in code-generating LLMs, can be exploited by threat actors to publish …
- Malicious NPM packages target PayPal users
Malicious NPM packages, uploaded in early March, target PayPal users by stealing credentials and hijacking cryptocurrency transfers. The packages, disguised as …
- Ubuntu security advisory (AV25-206) - Canadian Centre for Cyber Security
Ubuntu published security notices addressing vulnerabilities in the Linux kernel affecting Ubuntu 14.04 ESM, 16.04 ESM, 18.04 ESM, 20.04 LTS, 22.04 LTS, and …
- DaVita hit by ransomware attack - Cybersecurity Insiders
DaVita, a major kidney dialysis company, recently experienced a ransomware attack. While patient services were not affected, the stolen data could be sold on …
- ResolverRAT Campaign Targets Healthcare, Pharma via Phishing and DLL Side-Loading
A new remote access trojan, ResolverRAT, has been discovered targeting healthcare and pharmaceutical sectors through phishing emails. The malware uses …
- Dell security advisory (AV25-208) - Canadian Centre for Cyber Security
Dell published security advisories between April 7 and 13, 2025, addressing vulnerabilities in multiple products. Users and administrators are encouraged to …
- Attackers Maintaining Access to Fully Patched Fortinet Gear
Attackers are using a technique to maintain remote access to hacked Fortinet devices, even after patching. They plant symbolic links on compromised devices, …
- Psychiatric documents with sensitive patient info found ‘loosely blown about’ near Regina medical clinic – DataBreaches.Net
Sensitive patient records from the Elphinstone Medical Clinic were found scattered near the clinic. A contracted cleaning employee had improperly disposed of …
- Top US lab testing firm hit with major data leak, exposes health info on 1.6 million users | TechRadar
Laboratory Services Cooperative (LSC), a major US-based laboratory for healthcare providers, suffered a data breach in October 2024, affecting approximately …
- SK.com allegedly hacked by Qilin – DataBreaches.Net
Qilin claims to have hacked SK.com and exfiltrated over 1TB of data, threatening to release it if SK does not pay a ransom within 48 hours. Qilin provided no …
- Elon Musk $100 Million Private Jet Fleet Preferences Leaked - Aviation A2Z
A cyberattack on NetJets Inc. exposed Elon Musk’s private jet preferences, including his preference for a chilly cabin, minimal crew interaction, and speed …
- Trump exempts phones, computers, chips from new tariffs
Smartphones, computers, and other electronic devices will be exempt from President Trump’s reciprocal tariffs on Chinese products.
- Pentagon to terminate $5.1 billion in IT contracts with Accenture, Deloitte, others | Reuters
The Pentagon is terminating $5.1 billion in IT contracts with companies like Accenture and Deloitte, citing non-essential spending on services that can be …
- www.techtimes.com/articles/…
Pentagon Advisory on Signal Messenger Vulnerability The Pentagon issued a department-wide advisory concerning the Signal messaging application, citing a …
- cyble.com/blog/germ…
Signal Messenger Targeted in Cyber Espionage Campaign Russia-aligned threat actors are conducting an ongoing cyber espionage campaign targeting Signal …
- 2 Android Zero-Day Bugs Under Active Exploit
Google patched two actively exploited zero-day vulnerabilities in Android, CVE-2024-53197 and CVE-2024-53150, which allow attackers to access sensitive …
- Adobe security advisory (AV25–199) - Canadian Centre for Cyber Security
Adobe published security advisories on April 8, 2025, addressing vulnerabilities in multiple products. The Cyber Centre encourages users and administrators to …
- Microsoft security advisory - April 2025 monthly rollup (AV25-201) - Canadian Centre for Cyber Security
Microsoft released security advisories on April 8, 2025, addressing vulnerabilities in multiple products, including critical updates for Microsoft 365 Apps, …
- Medusa Ransomware Claims NASCAR Breach in Latest Attack
The Medusa ransomware gang claims to have breached NASCAR, demanding a $4 million ransom and threatening to leak internal data. The group has also claimed …
- Microsoft Drops Another Massive Patch Update
Microsoft released a Patch Tuesday update addressing 126 vulnerabilities, including a zero-day flaw already exploited in ransomware attacks. The update …
- OCC email system breach described as ‘stunning, serious’ | CSO Online
The US Office of the Comptroller of the Currency (OCC) experienced a cyber intrusion involving unauthorized access to its email system. The breach, which …
- Russian APT Hacker Observed Deploying Unusual RDP Tactics
A Russian nation-state threat actor, tracked as UNC5837, exploited lesser-known features of Microsoft Windows Remote Desktop Protocol (RDP) to target European …
- News alert: SpyCloud study shows gaps in EDR, antivirus — 66% of malware infections missed - The Last Watchdog
SpyCloud’s analysis of darknet data reveals that 66% of malware infections occur on devices with endpoint security solutions. SpyCloud’s EDR integrations help …
- Kellogg discloses data breach | Cybernews
WK Kellogg suffered a data breach impacting an unknown number of victims through a third-party vendor, Cleo. The breach involved unauthorized access to servers …
- Someone hacked ransomware gang Everest’s leak site | TechCrunch
The Everest ransomware gang’s leak site was hacked and defaced, replaced with a message discouraging crime. Everest, a Russia-linked gang, has claimed credit …
- Adaptive Security: Inside OpenAI’s First Cyber Investment | Cyber Magazine
OpenAI’s Startup Fund is one of several investors in AI-powered cybersecurity startup Adaptive Security, which helps mitigate social engineering attacks …
- Europcar GitLab breach exposes data of up to 200,000 customers
The article describes a data breach at Europcar GitLab repositories, which exposed personal information of up to 200,000 customers. The threat actor stole …
- OpenAI CEO Forced to Delay GPT-5 Launch: “It’s Harder Than We Thought”
OpenAI CEO Sam Altman announced a delay in the release of GPT-5, citing the need to improve it beyond initial expectations and address integration challenges. …
- Call Records of Millions Exposed by Verizon App Vulnerability - SecurityWeek
A Verizon call filtering application, developed by Cequint, contained a vulnerability that allowed attackers to access call records of millions of users. The …
- OPSEC Failure Exposes Coquettte’s Malware Campaigns on Bulletproof Hosting Servers
A novice cybercrime actor, Coquettte, was discovered using a Russian bulletproof hosting provider, Proton66, to distribute malware disguised as an antivirus …
- CERT-UA reports of attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware
CERT-UA reported three cyberattacks in March 2025 targeting Ukrainian agencies and critical infrastructure. The attacks, tracked as UAC-0219, used compromised …
- CERT-UA reports of attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware
CERT-UA reported three cyberattacks in March 2025 targeting Ukrainian agencies and critical infrastructure. The attacks, tracked as UAC-0219, used compromised …
- Sonatype warns of 18,000 open source malware packages | InfoWorld
Sonatype’s Open Source Malware Index for Q1 2025 revealed a significant increase in data exfiltration malware, comprising 56% of discovered packages. The index …
- Hackers Leverage Microsoft Teams Message to Drop Malicious Payload
Hackers are using Microsoft Teams to deliver malicious payloads, bypassing traditional email security controls. The attack involves social engineering, …
- Thousands of Android Phones Found With Preinstalled Malware That Steals Data Right Away | Extremetech
A new version of the Triada trojan, preinstalled on thousands of Android devices, primarily targets Russian users. The malware, hidden in Android phone …
- Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records
The article describes a hacker’s claim to have breached Twilio’s SendGrid, leaking data on 848,000 customers. The hacker is offering the data for sale and has …
- $500,000 stolen in Australian super fund data breach | Superannuation | The Guardian
The article describes a cyber attack on Australian superannuation funds, resulting in the theft of 500,000 from a small number of customers. The attack …
- What’s new in the 2021 Cost of a Data Breach Report - Security Intelligence | IBM
The 2021 Cost of a Data Breach Report, sponsored by IBM Security, reveals a record-high average cost of $4.24 million, with remote work contributing to …
- Compromised SpotBugs Token Led to GitHub Actions Supply Chain Hack - SecurityWeek
A compromised SpotBugs token from December 2024 was used in a March 2025 GitHub Actions supply chain attack. The token, belonging to a SpotBugs maintainer, was …
- OH-MY-DC: OIDC Misconfigurations in CI/CD
Unit 42 researchers discovered OIDC misconfigurations in CI/CD environments, specifically in CircleCI’s OIDC implementation. These misconfigurations, including …
- Critical Apache Parquet Vulnerability Leads to Remote Code Execution - SecurityWeek
A critical vulnerability in the Apache Parquet Java library, CVE-2025-30065, allows remote code execution and system compromise. The flaw, introduced in …
- Have We Reached a Distroless Tipping Point?
The evolution of containerization, from LXC to Docker and the Open Container Initiative, has led to a tipping point in open source software delivery. …
- EU Pushes for Backdoors in End-to-End Encryption
The European Commission is pushing for law enforcement backdoors into end-to-end encryption to strengthen member states’ cyber defenses. The strategy document, …
- Fake Passport Generated by ChatGPT Bypasses Security - Tech News
Article claims: A fake passport generated using ChatGPT-4o successfully bypassed a digital identity verification process, highlighting the vulnerability of …
- Millions of free VPN users have inadvertently sent their data to China | TechRadar
The article describes how millions of free VPN users have inadvertently sent their data to China without realizing it. At least five VPNs are linked to Qihoo …
- Hunters International Ransomware Gang Rebranding, Shifting Focus - SecurityWeek
The notorious cybercrime group Hunters International, known for ransomware attacks, is rebranding and shifting its focus to data theft and extortion. Evidence …
- Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439) - Help Net Security
Attackers are exploiting CVE-2024-20439, a static credential vulnerability in Cisco Smart Licensing Utility, allowing unauthenticated remote access. Cisco …
- HellCat Ransomware: What You Need To Know | Tripwire
HellCat is a ransomware-as-a-service group that emerged in 2024, employing a “double extortion” tactic by stealing sensitive data and encrypting systems. The …
- EvilCorp join with RansomHub to launch global cyber attacks - Cybersecurity Insiders
EvilCorp, a notorious cybercriminal group led by Maksim Yakubets, has partnered with RansomHub, a ransomware-as-a-service provider. This alliance poses a …
- Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores
Hackers are using a sophisticated web-skimming campaign targeting online retailers, utilizing a deprecated Stripe API to validate stolen credit card details in …
- Localhost dangers: CORS and DNS rebinding - The GitHub Blog
Cross-Origin Resource Sharing (CORS) allows websites to communicate with each other, but improperly configured CORS policies can lead to vulnerabilities. …
- Ivanti security advisory (AV25-184) - Canadian Centre for Cyber Security
Ivanti published a security advisory on April 3, 2025, addressing a vulnerability in multiple products. A critical update is available for Ivanti Connect …
- Chinese APT Pounces on Misdiagnosed RCE in Ivanti VPN Appliances - SecurityWeek
Ivanti recently discovered a critical vulnerability in its Connect Secure VPN appliances, CVE-2025-22457, which was originally patched in February but …
- New advanced FIN7’s Anubis backdoor allows to gain full system control on Windows
Russian cybercrime group FIN7 (also known as Savage Ladybug or Carbanak) has developed a new Python-based backdoor called Anubis that provides complete remote …
- 79 Arrested as Dark Web’s Largest Child Abuse Network ‘Kidflix’ Busted
In a sweeping global operation, authorities have dismantled “Kidflix,” the dark web’s largest child sexual abuse material network with over 1.8 million …
- Andy Yen gegen Revisionsplan des Bundesrats: «Mit dieser aggressiven Überwachung müsste Proton die Schweiz verlassen» | Der Bund
Andy Yen, CEO of Swiss tech company Proton, warns that proposed revisions to Switzerland’s surveillance law could force secure communications providers like …
- China’s FamousSparrow APT Hits Americas with SparrowDoor Malware
A recent ESET investigation reveals that China-linked APT group FamousSparrow (also known as Salt Typhoon) has launched a new cyberespionage campaign targeting …
- Google Calendar leading to Phishing Scams and Data Thefts - Cybersecurity Insiders
Cybercriminals are increasingly exploiting Google Calendar by sending deceptive event invitations, meetings, or payment reminders that appear to come from …
- T-Mobile Shows Users the Names, Pictures, and Exact Locations of Random Children
On Tuesday, T-Mobile experienced a significant privacy breach with its SyncUP tracking devices, whereby parents lost the ability to monitor their own …
- China Regulator Proposes Amendments to Cybersecurity Law – DataBreaches.Net
The Cyberspace Administration of China recently released draft amendments to China’s Cybersecurity Law for public consultation until April 27, 2025. These …
- Malaysian Airport’s Ransomware Attack a Warning for Asia
A ransomware attack on Kuala Lumpur International Airport (KLIA) on March 23, 2025, caused major disruptions to flight systems and operations, with hackers …
- New Lazarus Group Scam Targets Crypto Jobseekers
The Lazarus Group, notorious for its $1.5 billion ByBit crypto heist, has launched a new campaign called ClickFake Interview, targeting cryptocurrency …
- Data Leak of Twitter X and Royal Mail available on Dark Web - Cybersecurity Insiders
Royal Mail has confirmed a data breach involving 144GB of sensitive information stolen via its technology partner Spectos in March 2025, now for sale on the …
- The Ripple Effects Of Maryland’s 3% Service Tax On IT Services
Maryland’s new 3% tax on IT services—aimed at addressing a $3.3 billion budget shortfall—is drawing strong criticism from the tech sector and small businesses. …
- New Study Ranks Platforms By Password Reset Frequency - Cybersecurity Insiders
A recent study by Heepsy reveals that YouTube users reset their passwords more than any other platform, averaging 4.3 resets per user annually, driven by over …
- Apple backported fixes for three actively exploited flaws to older devices
Apple has released security updates for older iOS and macOS devices to address three critical zero-day vulnerabilities—CVE-2025-24085, CVE-2025-24200, and …
- Oracle Health warnt vor Datenleck | CSO Online
Oracle Health has disclosed a data breach involving legacy Cerner servers that had not yet been migrated to the Oracle Cloud, potentially exposing sensitive …
- It takes two: The 2025 Sophos Active Adversary Report – Sophos News
The fifth anniversary edition of Sophos’ Active Adversary Report offers deep insights into evolving cyber threats by analysing 413 cases handled by its IR and …
- Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users - SecurityWeek
Google has introduced end-to-end encrypted email for enterprise Gmail users, starting with internal communications before expanding to all Gmail inboxes and …
- UK Government Previews Cybersecurity Legislation
The British government has unveiled plans for a new Cyber Security and Resilience Bill that will implement stricter incident reporting rules and enhance supply …
- Canon Printer Flaw Enables Remote Code Execution
Researchers have uncovered a high-severity vulnerability (CVE-2025-1268) in Canon’s Generic Plus printer drivers that could allow attackers to execute …
- Vitenas Cosmetic Surgery patient data hacked and leaked – DataBreaches.Net
A recent cyberattack on Vitenas Cosmetic Surgery in Texas led to a significant data breach involving unencrypted patient health information, including …
- Exclusive: Royal Mail suffers alleged data breach as threat actor claims 144GB stolen - Cyber Daily
A threat actor known as “GHNA” claims to have breached Royal Mail Group in March 2025, stealing 16,549 files (144GB) containing customer PII, confidential …
- 270,000 Samsung Customer Support Tickets Leak onto the Internet. Here’s What Happened. - CX Today
Samsung Germany has suffered a massive data breach, with 270,000 customer service tickets leaked due to credentials stolen in 2021 from …
- Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
Russian hacking group Water Gamayun (aka EncryptHub) is exploiting a Windows vulnerability to deploy two new backdoors: SilentPrism and DarkWisp. Using …
- Trend Micro Open Sources AI Tool Cybertron
Trend Micro is open sourcing its Trend Cybertron cybersecurity LLM and AI agent, allowing free access to its threat detection automation capabilities. Built on …